LockAdminUserWhenEditingUserTest.php

Go to the documentation of this file.

<?php
namespace Magento\Security\Test\TestCase;

use Magento\User\Test\Page\Adminhtml\UserEdit;
use Magento\User\Test\Page\Adminhtml\UserIndex;
use Magento\Backend\Test\Page\AdminAuthLogin;
use Magento\User\Test\Fixture\User;
use Magento\Mtf\TestCase\Injectable;

class LockAdminUserWhenEditingUserTest extends Injectable
{
    /* tags */
    const MVP = 'yes';
    const SEVERITY = 'S2';
    /* end tags */

    protected $userIndexPage;

    protected $userEditPage;

    protected $configData;

    protected $adminAuthLogin;

    public function __inject(
        UserIndex $userIndex,
        UserEdit $userEdit,
        AdminAuthLogin $adminAuthLogin
    ) {
        $this->userIndexPage = $userIndex;
        $this->userEditPage = $userEdit;
        $this->adminAuthLogin = $adminAuthLogin;
    }

    public function test(
        $attempts,
        User $customAdmin,
        User $user,
        $configData
    ) {
        $this->configData = $configData;

        // Preconditions
        $this->objectManager->create(
            \Magento\Config\Test\TestStep\SetupConfigurationStep::class,
            ['configData' => $this->configData]
        )->run();
        $customAdmin->persist();

        // Steps login to backend with new user
        $this->adminAuthLogin->open();
        $this->adminAuthLogin->getLoginBlock()->fill($customAdmin);
        $this->adminAuthLogin->getLoginBlock()->submit();
        // Select user to edit.
        $filter = ['username' => $customAdmin->getUsername()];
        $this->userIndexPage->open();
        $this->userIndexPage->getUserGrid()->searchAndOpen($filter);
        // Edit user with wrong password
        for ($i = 0; $i < $attempts; $i++) {
            $this->userEditPage->getUserForm()->fill($user);
            $this->userEditPage->getPageActions()->save();
        }
        // Reload
        $this->adminAuthLogin->open();
        $this->adminAuthLogin->getLoginBlock()->fill($customAdmin);
        $this->adminAuthLogin->getLoginBlock()->submit();
    }

    public function tearDown()
    {
        $this->objectManager->create(
            \Magento\Config\Test\TestStep\SetupConfigurationStep::class,
            ['configData' => $this->configData, 'rollback' => true]
        )->run();
    }
}